Mimecast Limited Due Diligence

Run due diligence on Mimecast Limited: check compliance and get alerts when suppliers or ownership change.

United States · owned by Permira (United Kingdom) · www.mimecast.com · 18 vendors

Mimecast is a cybersecurity company specializing in human risk management and advanced email security. It provides cloud-based solutions to protect organizations from email-borne threats, data leaks, and cyberattacks, including anti-phishing, anti-malware, and email continuity services. The company serves businesses of all sizes globally, helping them secure email and collaboration tools against evolving cyber threats.

Resilience scores

Technology vendors

Services catalogue

17 services in catalogue across 4 categories; runs on 18 sub-vendors.

Insights

Last updated 2026-05-04 · revision 3

18 direct vendors, 176 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

6 in-scope frameworks identified; showing 3.

GDPR (source) — Evidence found

Evidence: https://www.mimecast.com/legal/privacy-statement/, https://trust.mimecast.com/, https://www.dataprivacyframework.gov/list

SOC 2 (source) — Evidence found

Evidence: https://trust.mimecast.com/

HIPAA (source) — Evidence found

Evidence: https://trust.mimecast.com/

Financials

Three-year financials

Financial Resilience Score: 6/10

Mimecast operated as a cloud-based cybersecurity and email security company with a subscription-based SaaS revenue model, which generally provides high revenue predictability and recurring cash flows. The company demonstrated consistent double-digit revenue growth over multiple years prior to its acquisition by Permira in 2022 for approximately $5.8B, indicating strong market demand and customer retention in the email security and cyber resilience space. The subscription model and multi-year contracts with enterprise customers provide a stable revenue base and reduce churn risk significantly. However, as a private company post-acquisition, detailed financial disclosures are limited, making a full resilience assessment difficult. The leveraged buyout structure introduced by Permira likely added significant debt to the balance sheet, which is a common risk factor in private equity-backed transactions and could constrain financial flexibility. Mimecast competes in a highly competitive cybersecurity market against well-capitalized players such as Microsoft, Proofpoint, and Broadcom, which creates ongoing pricing and market share pressure. The company's focus on a relatively narrow product category (email security and cyber resilience) creates some concentration risk, though the criticality of email security to enterprise operations supports strong retention rates.

Key strengths: Subscription-based SaaS model providing high revenue predictability, Consistent double-digit revenue growth trajectory pre-acquisition, Acquired by Permira in 2022 for ~$5.8B, validating enterprise value, Strong customer retention in mission-critical email security segment, Global enterprise customer base across multiple geographies

Risk factors: Significant leverage likely introduced post-LBO by Permira, Limited financial transparency as a private company post-2022, Intense competition from Microsoft, Proofpoint, and Broadcom, Narrow product concentration in email security segment, Cybersecurity threat landscape requires continuous R&D investment

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report